$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa File: 5e224ae1-808a-3754-8044-eaca79be6972.roa (raw, json) Hash identifier: nzJAzYTD3nenSlMEpucn4q9zzGUhr5Y7tB30jQ6W5Fs= Subject key identifier: C1:81:40:18:7C:13:60:C6:67:43:03:E4:67:9A:1A:5F:E8:67:C3:83 Certificate issuer: /CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d Certificate serial: 010D0C9F4328584BA667AF84E985D9D331204280 Authority key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 198949 IP address blocks: 64.45.64.0/18 maxlen: 24 65.18.0.0/18 maxlen: 24 65.18.64.0/19 maxlen: 24 65.18.96.0/20 maxlen: 24 141.114.0.0/16 maxlen: 24 204.197.0.0/17 maxlen: 24 207.166.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:af:84:e9:85:d9:d3:31:20:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=a5dfe838-3bab-46b3-b9ee-a82e66a0be2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a6:cd:59:17:52:aa:b6:63:cb:90:58:f5:32: b2:e6:9a:06:78:98:57:7b:49:04:29:8c:f0:9a:51: 1d:30:77:2f:e5:5d:76:0c:fb:7c:85:a1:82:b5:e7: f7:17:86:52:71:e1:55:bf:eb:e5:e4:a0:a7:b3:20: cc:d5:96:71:7a:70:a2:97:67:7d:bf:15:10:cb:b8: f8:85:44:e8:6a:d6:be:3d:b8:79:ab:c9:c5:c0:29: 64:89:0a:39:59:4e:41:15:cb:7e:8a:f7:28:79:20: 4e:d1:b7:17:f1:b2:41:d5:90:1e:4c:d7:23:ab:a7: 9e:5c:5b:86:a6:f5:f1:93:fc:56:c4:ed:04:21:6a: 8d:b9:e9:15:fe:d7:1e:53:a2:26:a8:36:a6:b4:9b: 3d:87:a7:f1:df:0a:9e:e3:9d:ac:46:92:cc:43:9a: a4:22:bd:e9:79:b8:6d:d6:38:cc:c1:4c:81:f3:72: 03:e4:30:ab:49:4e:67:2d:06:d1:77:86:ff:e0:74: 03:b5:8d:70:b3:fc:51:ea:79:d4:84:24:0b:29:35: b6:6c:36:31:6c:5a:13:7b:fb:32:90:e6:3e:d2:7e: ca:50:5b:cc:bb:d9:b1:01:06:36:14:06:e6:29:81: ea:a3:0e:7b:c9:48:3f:2d:d4:39:8d:25:36:7e:c0: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:81:40:18:7C:13:60:C6:67:43:03:E4:67:9A:1A:5F:E8:67:C3:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/5e224ae1-808a-3754-8044-eaca79be6972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl X509v3 Authority Key Identifier: keyid:B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer sbgp-ipAddrBlock: critical IPv4: 64.45.64.0/18 65.18.0.0-65.18.111.255 141.114.0.0/16 204.197.0.0/17 207.166.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:79:02:0a:21:db:a2:ac:8f:38:e7:af:30:28:4d:17:5f:b3: fc:89:e8:89:0f:f9:a8:23:1a:80:43:85:a4:07:1c:bc:ee:06: 4b:a5:a1:9f:e6:ce:03:d5:ef:95:7c:32:a1:a1:00:ca:9e:b0: 9d:e3:52:99:11:43:fd:34:9b:56:cb:a2:ea:4a:4d:85:11:be: 65:2f:c0:d4:0c:43:42:ae:67:d6:94:5e:15:b2:5c:75:99:a4: 14:06:a0:f5:33:cf:6b:91:ac:61:4b:52:82:5c:8a:af:a0:9d: b6:c8:c5:0c:e8:8f:d7:26:15:ab:9a:c1:d7:58:f0:e9:cf:db: 7b:85:e4:b4:96:72:07:4d:bf:80:c3:49:99:d8:0b:db:6e:c1: 1c:0f:25:d6:c5:0e:70:b5:0c:c0:67:bc:ae:05:37:58:51:b3: c1:fe:31:bb:c2:0c:54:9d:97:f1:d6:ab:91:5b:29:cb:13:31: 03:b8:2a:01:64:9d:65:42:d8:0e:3d:59:a6:3b:1e:8a:43:04: fd:60:aa:98:52:4b:75:5f:0c:a8:40:bc:c6:82:39:1f:6f:0d: 08:8d:fd:70:0f:fb:03:79:7c:c6:6f:9a:af:02:df:ff:28:62: 4c:0d:2e:9d:d5:aa:4e:d9:06:91:b4:2c:fd:dc:07:6b:d4:a2: d9:fc:a1:68 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEumZ6+E6YXZ0zEgQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE3Y2UyMmItNjFhMC00YWU5LTljYzAtZjUwZjNiYjc1 MzBkMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YTVkZmU4MzgtM2JhYi00NmIzLWI5ZWUtYTgyZTY2YTBiZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6bNWRdSqrZjy5BY9TKy5poGeJhXe0kEKYzw mlEdMHcv5V12DPt8haGCtef3F4ZSceFVv+vl5KCnsyDM1ZZxenCil2d9vxUQy7j4 hUToata+Pbh5q8nFwClkiQo5WU5BFct+ivcoeSBO0bcX8bJB1ZAeTNcjq6eeXFuG pvXxk/xWxO0EIWqNuekV/tceU6ImqDamtJs9h6fx3wqe452sRpLMQ5qkIr3pebht 1jjMwUyB83ID5DCrSU5nLQbRd4b/4HQDtY1ws/xR6nnUhCQLKTW2bDYxbFoTe/sy kOY+0n7KUFvMu9mxAQY2FAbmKYHqow57yUg/LdQ5jSU2fsAjWwIDAQABo4IDczCC A28wHQYDVR0OBBYEFMGBQBh8E2DGZ0MD5GeaGl/oZ8ODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdj ZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2JiNzUzMGQvNWUyMjRhZTEtODA4YS0z NzU0LTgwNDQtZWFjYTc5YmU2OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjE3Y2UyMmItNjFhMC00YWU5LTlj YzAtZjUwZjNiYjc1MzBkL2IxN2NlMjJiLTYxYTAtNGFlOS05Y2MwLWY1MGYzYmI3 NTMwZC5jcmwwHwYDVR0jBBgwFoAUt2tfGIphWyOCw/KpdRRVpSGxh+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBm M2JiNzUzMGQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGQC1AMAsD AwFBEgMEBEESYAMDAI1yAwQHzMUAAwQFz6bgMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI95Agoh26Ksjzjn rzAoTRdfs/yJ6IkP+agjGoBDhaQHHLzuBkuloZ/mzgPV75V8MqGhAMqesJ3jUpkR Q/00m1bLoupKTYURvmUvwNQMQ0KuZ9aUXhWyXHWZpBQGoPUzz2uRrGFLUoJciq+g nbbIxQzoj9cmFauawddY8OnP23uF5LSWcgdNv4DDSZnYC9tuwRwPJdbFDnC1DMBn vK4FN1hRs8H+MbvCDFSdl/HWq5FbKcsTMQO4KgFknWVC2A49WaY7HopDBP1gqphS S3VfDKhAvMaCOR9vDQiN/XAP+wN5fMZvmq8C3/8oYkwNLp3Vqk7ZBpG0LP3cB2vU otn8oWg= -----END CERTIFICATE-----Generated at Mon Nov 3 22:11:20 2025 by rpki-client